55e5c9b513
public/property split is landed to selectively export public types to
vendors. So rules happening within system should be in private. This
introduces private/property.te and moves all allow and neverallow rules
from any coredomains to system defiend properties.
Bug: 150331497
Test: system/sepolicy/tools/build_policies.sh
Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
(cherry picked from commit 42c7d8966c)
11 lines
398 B
Text
11 lines
398 B
Text
# type_transition must be private policy the domain_trans rules could stay
|
|
# public, but conceptually should go with this
|
|
# Technically not a daemon but we do want the transition from init domain to
|
|
# asan_extract to occur.
|
|
with_asan(`
|
|
typeattribute asan_extract coredomain;
|
|
init_daemon_domain(asan_extract)
|
|
|
|
# We need to signal a reboot when done.
|
|
set_prop(asan_extract, powerctl_prop)
|
|
')
|